Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76381MEDIUMInformation Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAREPSS 0.2%CVE-2026-76393MEDIUMRace Condition during Model Upload through the REST API in Splunk AI ToolkitEPSS 0.2%CVE-2026-20296HIGHSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk EnterpriseEPSS 0.2%CVE-2026-20166MEDIUMSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk EnterpriseEPSS 0.2%CVE-2026-76281—Improper Access Control in Splunk EnterpriseEPSS 0.2%CVE-2026-76303MEDIUMStored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAREPSS 0.2%CVE-2026-76308MEDIUMMissing Authorization through the REST API in Splunk SOAREPSS 0.2%CVE-2026-76286MEDIUMServer-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP ServerEPSS 0.2%CVE-2026-76259HIGHImproper Privilege Management on the Management Port in Splunk Enterprise for WindowsEPSS 0.2%CVE-2023-40596HIGHSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLLEPSS 0.2%CVE-2026-76304MEDIUMSensitive Information Disclosure through Automation Broker Configuration in Splunk SOAREPSS 0.2%CVE-2026-76266HIGHLocal Privilege Escalation through Linux Package Upgrades in Splunk EnterpriseEPSS 0.2%CVE-2026-20203MEDIUMImproper Access Control in Data Model Acceleration in Splunk EnterpriseEPSS 0.2%CVE-2026-76334MEDIUMSPL Injection through Dashboard Studio Workflow Actions in Splunk EnterpriseEPSS 0.2%CVE-2026-76385MEDIUMInformation Disclosure through Action Parameters in Venafi app for Splunk SOAREPSS 0.1%CVE-2025-20233LOWIncorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File EditingEPSS 0.1%CVE-2026-76297MEDIUMFederated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk EnterpriseEPSS 0.1%